CVE-2024-26495

Friendica versions released after v.2023.12 are susceptible to a Cross Site Scripting (XSS) vulnerability. The root cause involves improper neutralization of input during web page generation, specifically within the BBCode tags used in the post content and post comments functions. A remote attack...